diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_action_allow.go b/pkg/serverconfigs/firewallconfigs/http_firewall_action_allow.go
index f90a006..44b12ec 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_action_allow.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_action_allow.go
@@ -1,5 +1,13 @@
 package firewallconfigs
 
+type AllowScope = string
+
+const (
+	AllowScopeGroup  AllowScope = "group"
+	AllowScopeServer AllowScope = "server"
+	AllowScopeGlobal AllowScope = "global"
+)
+
 type HTTPFirewallAllowAction struct {
-	Life int64 `yaml:"life" json:"life"`
+	Scope AllowScope `yaml:"scope" json:"scope"`
 }
diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_action_utils.go b/pkg/serverconfigs/firewallconfigs/http_firewall_action_utils.go
index 1d3afad..7e899d3 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_action_utils.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_action_utils.go
@@ -44,7 +44,7 @@ var AllActions = []*HTTPFirewallActionDefinition{
 	{
 		Name:        "允许通过",
 		Code:        HTTPFirewallActionAllow,
-		Description: "允许正常通过，不记录到日志。",
+		Description: "允许跳过规则集正常通过防火墙。",
 		Category:    HTTPFirewallActionCategoryAllow,
 	},
 	{